General

  • Target
    https://github.com/youvegotpwned/RedEngineCrack/releases/download/fivem/RedEngine.zip
  • Sample250107-hefa4ayncx

Malware Config

Extracted

Family
  • quasar

Version
  • 1.4.0

Botnet
  • TRAINING

C2
  • 185.241.208.185:16145

Mutex
  • 22073971-8d9a-4364-9916-abbb09ac9d8b

Attributes
  • encryption_key

    7A9A8376440E3257DB2B54403642F366A5FBE14A

  • install_name

    Starter Module.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Starter Module

  • subdirectory

    Modules

Targets

MITRE ATT&CK Enterprise v15

Tasks